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DETAILED ACTION 

1 . This action is in response to amendment filed 12/22/2006. Claims 1 , 10, 17, 26 
and 42 were amended. Claims 2, 7, 18, 23, 34, 39 and 48 were cancelled. Claims 1, 3- 
6, 8-16, 17, 19-22, 24-32, 33, 35-38 and 40-47 are pending. 

Claim Rejections - 35 USC §112 

2. Amendments to the claims were received 12/22/2006, thus previous 112 
rejection has been withdrawn. 

Response to Arguments 

3. Applicant's arguments with respect to the claims have been considered but are 
moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

4. Claims 1-16 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. Claims 1-16 disclose of a program alone and 
of itself that is not tangibly embodied. As such, the claims are not limited to statutory 
subject matter and are therefore non-statutory. 
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Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1, 3-6, 8-16, 17, 19-22, 24-32, 33, 35-38 and 40-47 are rejected under 

35 U.S.C. 103(a) as being unpatentable over Nambu (US 2002/0124182) in view of 

Hershberg et al. (US 2003/0022657). 

As per claim 1, Nambu discloses: obtaining code operable to obtain from a data 
source master malware definition data, said malware definition identifying a plurality of 
malware each belonging to one of a plurality of classes of malware threat (0071-0072); 
identifying code operable to identify one or more classes of malware threat against 
which said mobile computing device is to be protected (0072-0074)(it is known within 
existing malware definition data to include information that classifies the malware items 
using classes); generating code operable to generate from said master malware 
definition data said mobile computing device malware definition data, said mobile 
computing device malware definition data identifying items of malware identifies within 
said master malware definition data which are within classes of malware threat against 
which said mobile computing device is to be protected (0075, 0077, 0078); wherein said 
obtaining code, said identifying code and said generating code are executed by a fixed 
location computing device, said fixed location computer being operable to transfer to 
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said mobile computing device one or more computer files including at least a computer 
file containing said mobile computer device malware definition data (0080-0083); 
wherein said fixed location computing device stores profile data identifying one or more 
different types of mobile computing device to which said fixed locatrion computing 
device transfers computer files and corresponding threat data identifying one or more 
classes of malware threat to which each of said mobile computing devices is vulnerable 
(0074, 0075, 0077); wherein only a subset of master malware definition data is used to 
generate said mobile computing device malware definition data for [tailoring] said 
mobile computing device malware definition data to accommodate only malware threats 
to which said mobile computing device is vulnerable (0078, 0081, 0108 by checking the 
present condition of the usert device, user info processing program 51 which 
determines condition of the user terminal); wherein said one or more classes of 
malware threat against said mobile computing device is to be protected are chosen 
according to classes of malware threat known to pose a problem to said mobile 
computing device, and classes for which it is desired to protect said mobile computing 
device according to user defined policies (0078, 0081, 0108 acquiring vaccine via user 
information processing program which determined condition of the user terminal). 
Nambu does not explicitly teach tailoring the downloads from the server for a specific 
device. However, Hershberg et al. discloses tailoring downloads for specific devices 
depending on whether the device needs the program or not (0089, 0094). Therefore it 
would have been obvious to one with ordinary skill in the art at the time the invention 
was made to use the teachings of Hershberg in conjunction with the teachings of 
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Nambu for the benefit of accommodating downloads from the server to clients with low 
bandwidth and low processing space (wireless devices), thereby greatly reducing the 
request to display delay. 



As per claim 17, Nambu discloses: obtaining code operable to obtain from a 
data source master malware definition data, said malware definition identifying a 
plurality of malware each belonging to one of a plurality of classes of malware threat 
(0071-0072); identifying code operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected (0072-0074) (it is known 
within existing malware definition data to include information that classifies the malware 
items using classes); generating code operable to generate from said master malware 
definition data said mobile computing device malware definition data, said mobile 
computing device malware definition data identifying items of malware identifies within 
said master malware definition data which are within classes of malware threat against 
which said mobile computing device is to be protected (0075, 0077, 0078); wherein said 
obtaining code, said identifying code and said generating code are executed by a fixed 
location computing device, said fixed location computer being operable to transfer to 
said mobile computing device one or more computer files including at least a computer 
file containing said mobile computer device malware definition data (0080-0083); 
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wherein said fixed location computing device stores profile data identifying one or more 
different types of mobile computing device to which said fixed locatrion computing 
device transfers computer files and corresponding threat data identifying one or more 
classes of malware threat to which each of said mobile computing devices is vulnerable 
(0074, 0075, 0077); wherein only a subset of master malware definition data is used to 
generate said mobile computing device malware definition data for [tailoring] said 
mobile computing device malware definition data to accommodate only malware threats 
to which said mobile computing device is vulnerable (0078, 0081, 0108 by checking the 
present condition of the usert device, user info processing program 51 which 
determines condition of the user terminal); wherein said one or more classes of 
malware threat against said mobile computing device is to be protected are chosen 
according to classes of malware threat known to pose a problem to said mobile 
computing device, and classes for which it is desired to protect said mobile computing 
device according to user defined policies (0078, 0081, 0108 acquiring vaccine via user 
information processing program which determined condition of the user terminal). 
Nambu does not explicitly teach tailoring the downloads from the server for a specific 
device. However, Hershberg et al. discloses tailoring downloads for specific devices 
depending on whether the device needs the program or not (0089, 0094). Therefore it 
would have been obvious to one with ordinary skill in the art at the time the invention 
was made to use the teachings of Hershberg in conjunction with the teachings of 
Nambu for the benefit of accommodating downloads from the server to clients with low 
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bandwidth and low processing space (wireless devices), thereby greatly reducing the 
request to display delay. 



As per claim 33, Nambu discloses: obtaining code operable to obtain from a 
data source master malware definition data, said malware definition identifying a 
plurality of malware each belonging to one of a plurality of classes of malware threat 
(0071-0072); identifying code operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected (0072-0074) (it is known 
within existing malware definition data to include information that classifies the malware 
items using classes); generating code operable to generate from said master malware 
definition data said mobile computing device malware definition data, said mobile 
computing device malware definition data identifying items of malware identifies within 
said master malware definition data which are within classes of malware threat against 
which said mobile computing device is to be protected (0075, 0077, 0078); wherein said 
obtaining code, said identifying code and said generating code are executed by a fixed 
location computing device, said fixed location computer being operable to transfer to 
said mobile computing device one or more computer files including at least a computer 
file containing said mobile computer device malware definition data (0080-0083); 
wherein said fixed location computing device stores profile data identifying one or more 
different types of mobile computing device to which said fixed locatrion computing 
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device transfers computer files and corresponding threat data identifying one or more 
classes of malware threat to which each of said mobile computing devices is vulnerable 
(0074, 0075, 0077); wherein only a subset of master malware definition data is used to 
generate said mobile computing device malware definition data for [tailoring] said 
mobile computing device malware definition data to accommodate only malware threats 
to which said mobile computing device is vulnerable (0078, 0081 , 0108 by checking the 
present condition of the usert device, user info processing program 51 which 
determines condition of the user terminal); wherein said one or more classes of 
malware threat against said mobile computing device is to be protected are chosen 
according to classes of malware threat known to pose a problem to said mobile 
computing device, and classes for which it is desired to protect said mobile computing 
device according to user defined policies (0078, 0081, 0108 acquiring vaccine via user 
information processing program which determined condition of the user terminal). 
Nambu does not explicitly teach tailoring the downloads from the server for a specific 
device. However, Hershberg et al. discloses tailoring downloads for specific devices 
depending on whether the device needs the program or not (0089, 0094). Therefore it 
would have been obvious to one with ordinary skill in the art at the time the invention 
was made to use the teachings of Hershberg in conjunction with the teachings of 
Nambu for the benefit of accommodating downloads from the server to clients with low 
bandwidth and low processing space (wireless devices), thereby greatly reducing the 
request to display delay. 
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As per claims 3, 19 and 35, rejected as applied to claims 1,17 and 33. 
Furthermore Nambu discloses: said fixed location, computing device is a user computer 
having communication link with said mobile computing device (0074). 

As per claims 4, 20 and 36, Rejected as applied to claims 1, 17 and 33. 
Furthermore nambu discloses: when said mobile computing device is connected to said 
fixed location computing device, different versions of user generated computer filed 
respectively stored by said mobile computing device and said fixed location computing 
device are synchronized (0074, 0075, 0077 various user terminals). 

As per claims 5, 21 and 37, rejected as applied to claims 4, 20 and 36. 
Furthermore, Nambu et al. discloses: said mobile computing device malware definition 
data is transferred from said fixed location computing device to said mobile computing 
device during said synchronization (0075, 0077). 

As per claims 6, 22 and 38, rejected as applied to claims 4, 20 and 36. 
Furthermore, Nambu discloses: when said mobile computing device is connected to 
said fixed location computing device, versions of said mobile computing device malware 
definition data stored on said mobile computing device and said fixed location 
computing device are compared, and if said fixed location computing device has a more 
up-to-date version of said mobile computing device malware definition data, then said 
more up-to-date version of said mobile computing device malware definition data is 
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transferred from said fixed location computing device to said mobile computing device 
(0078-0079). 

As per claim 8, 24 and 40, rejected as applied to claims 1,17 and 33. 
Furthermore, Nambu et al. discloses: wherein user controlled policy data us used in 
combination with said threat data to control against which classes of malware threat 
said mobile computing device is protected by said mobile computing device malware 
definition data (0082). 

As per claims 9, 25 and 41, rejected as applied to claims 1,17 and 33. 
Furthermore, Nambu discloses: different types of operating system computer program 
used by mobile computing device (0074, various devices). 

As per claim 10, 26 and 42, rejected as applied to claims 1,17 and 33. 
Furthermore, Nambu et al. discloses: said fixed location computer device detects to 
which mobile computing devices it transfer computer files by detecting installation upon 
fixed location computing device of one or more transfer controlling computer programs 
operable to control transfer of computer files to one or more predetermined mobile 
computing devices (0078). 

As per claim 11, 27 and 43, rejected as applied to claims 1,17 and 33. 
Furthermore, Nambu discloses: fixed location computing device also transfers a 
malware scanner computer program from said data source to said mobile device 
(0078). 

As per claim 12, rejected as applied claims 1,17 and 33. Furthermore, Nambu 
discloses said fixed location computing device checks for updated master malware 
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definition data becoming available from said data source, if such updated master 
malware definition become available, then repeats steps of obtaining, identifying and 
generating (0070, 0083). 

As per claim 13, 29 and 45, rejected as applied to claim 11, 27 and 43. 
Furthermore, Nambu discloses: said fixed location computing device checks for an 
updated malware scanner computer program becoming available from said data source 
and, if such an update malware scanner computer program becomes available, then 
obtains said updated malware scanner computer program for transfer to said mobile 
computing device (0070, 0083). 

As per claim 14, 30 and 46, rejected as applied to claim 1,17, 33. Furthermore, 
Nambu et al, discloses: said master malware definition is data also used to protect said 
fixed location computing device from malware (01 12). 

As per claim 15 and 31, rejected as applied to claims 1 and 17. Furthermore, 
Nambu discloses: said fixed location computing device is connected to said data source 
by a fixed interner link (Fig. 5). 

As per claims 16 and 32, rejected as applied to claims 1 and 17. Furthermore, 
lathi et al discloses: said item of malware include one or more of a computer virus, a 
worm, a Trojan, a banned computer file, a banned word and a banned image (0078). 

As per claim 47, rejected as applied to claim 1. Furthermore, Nambu discloses: 
said fixed location device stores policy data including user defined settings identifying 
the manner in which said profile data is to be intercepted (0074, 0075, 0082). 
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Conclusion 

5. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Chuietal. (2002/0159632) 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Saoussen Besrour whose telephone number is 571-272- 
6547. The examiner can normally be reached on M-F 8:30am to. 5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Application/Control Number: 10/023,852 Page 13 

Art Unit: 2131 



ayaz mm 

SB SUPERVISORY PATENT EX^INEl 

March 8 2007 TECHNOLOGY CU72R 2100 



